topic Re: Why does the output for triggered alert scripts in Splunk contain ^ (hats/caret) characters? in Alerting

Why does the output for triggered alert scripts in Splunk contain ^ (hats/caret) characters?

ss250858 — Wed, 16 Nov 2016 02:37:54 GMT

I am calling a script on a triggered alert to send an snmp trap, but it was coming across like this.

"index^=common^ sourcetype^=processor^ source^=*Online*^ ^(REQ^ OR^ RSP^)^ earliest^=-5m@m^ latest^=now^ ^

I thought it was something snmp was doing but i redirected the output via a batch script and it's coming directly from Splunk as the values being passed.

What would be causing these?

Re: Why does the output for triggered alert scripts in Splunk contain ^ (hats/caret) characters?

rodrigorsilva — Thu, 17 Nov 2016 13:32:30 GMT

Hi,

Saw this - hope its useful:

https://answers.splunk.com/answers/68372/generate-snmp-trap-from-splunk.html

This script is very used, I use it myself and never had problems.

Tks

Rodrigo Ribeiro

Re: Why does the output for triggered alert scripts in Splunk contain ^ (hats/caret) characters?

cmisztur — Fri, 07 Jul 2017 15:37:09 GMT

good question...